[24171] in Kerberos
Solaris 9 Authentication
daemon@ATHENA.MIT.EDU (scanell)
Wed Jun 29 12:18:02 2005
Message-ID: <42C2C990.4020002@jpl.nasa.gov>
Date: Wed, 29 Jun 2005 09:17:20 -0700
From: scanell <scanell@jpl.nasa.gov>
MIME-Version: 1.0
To: Kerberos@mit.edu
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Configuration:
MIT Kerberos 1.4
Solaris 9 Master
Solaris 9, MAC OSX, & PC Clients
/usr/lib/ssh/sshd daemon using pam_krb5.so.1
Pre-Auth enabled
Issue:
MAC and PC clients using ssh authenticate successfully against Solaris 9
servers and Kerberos system.
ssh -l <username> <hostA>
<username>@<hostA> Password: <Enter Kerberos Password>
Last login: Wed Jun 29 08:26:47 2005 from <client host>
motd message
$
Solaris 9 clients get the following error when using Kerberos
authentication:
ssh -l <username> <hostA>
<username>@<hostA> Password: <Enter Kerberos Password>
Permission denied, please try again.
<username>@<hostA> Password: <Enter Shadow Password>
Last login: Wed Jun 29 08:26:47 2005 from <client hostA>
motd message
$
Master kdc.log:
Jun 29 08:43:55 <master kerberos server> krb5kdc[10062](info): AS_REQ (2
etypes {3 1}) <hostA ip address> PREAUTH_FAILED: <username@REALM> for
krbtgt@REALM, Decrypt integrity check failed
Steve
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
